wp2shell pre-auth RCE: WordPress 7.0.2 out

Send us Fan Mail A forced WordPress update, agentic browser risks, and a shift in supply chain attacks all point to the same problem: trust is being exploited faster than teams can validate it. For security and IT leaders, this is a change in where risk lives. Core platforms can be compromised without credentials, browser extensions can act with user privileges, and dependency updates can carry malicious code straight into CI. At the same time, ransomware operators are prioritizing identity access over traditional exploits. The result is a compressed window between exposure and impact. We also cover Microsoft's view on npm trust path attacks, new risks in AI browser agents, and why identity is again the primary entry point for ransomware. Learn more at https://crestvale.io Support the show